Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/3139302e3131352e38322e302f32332d3234203d3e20323730343535.roa
File:                     3139302e3131352e38322e302f32332d3234203d3e20323730343535.roa (raw, json)
Hash identifier:          Godzun4usTWIrpPWjZtk1Id0OOOE8QZS9MzqviJGuso=
Subject key identifier:   0B:6E:80:0F:65:A5:FA:B9:AF:B1:B2:3F:A4:AC:BB:2A:21:38:5B:AC
Certificate issuer:       /CN=39D5039FB41A6E31B24A650C9C3A3A3F512B662E
Certificate serial:       42D137E3389814FE64D198EA50AED85A00173EC7
Authority key identifier: 39:D5:03:9F:B4:1A:6E:31:B2:4A:65:0C:9C:3A:3A:3F:51:2B:66:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39D5039FB41A6E31B24A650C9C3A3A3F512B662E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/3139302e3131352e38322e302f32332d3234203d3e20323730343535.roa
Signing time:             Thu 07 Dec 2023 14:56:00 +0000
ROA not before:           Thu 07 Dec 2023 14:51:00 +0000
ROA not after:            Thu 05 Dec 2024 14:56:00 +0000
asID:                     270455
IP address blocks:        190.115.82.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d1:37:e3:38:98:14:fe:64:d1:98:ea:50:ae:d8:5a:00:17:3e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39D5039FB41A6E31B24A650C9C3A3A3F512B662E
        Validity
            Not Before: Dec  7 14:51:00 2023 GMT
            Not After : Dec  5 14:56:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:45:ff:fa:63:9d:b6:c1:70:1e:fb:65:fd:3a:
                    25:30:2f:17:9e:64:e2:a6:bf:13:33:5a:2a:51:6b:
                    95:c6:15:24:1c:e1:65:b1:74:90:31:77:83:f7:d1:
                    50:06:50:c0:2f:30:a6:c3:55:b3:23:da:12:6a:2b:
                    ac:bf:90:b3:9a:42:62:0e:47:48:40:9a:86:be:de:
                    1a:66:bf:d0:7d:3f:eb:24:31:78:1c:ef:07:d6:17:
                    04:37:28:52:22:ef:7d:d9:23:05:8c:79:95:09:17:
                    0a:bd:81:f8:83:13:5c:24:c1:5e:fa:fd:29:b2:11:
                    d5:cc:4b:03:76:4b:ec:be:99:e1:34:ae:d2:89:42:
                    2c:af:82:43:2c:a2:81:20:67:d6:93:7b:df:d8:6f:
                    0f:81:6e:72:18:5f:e4:f7:69:e8:4b:e9:16:70:11:
                    4c:fb:ad:c2:e1:40:92:d5:7a:62:ce:d9:54:38:51:
                    37:48:fd:82:6b:d3:46:e7:16:b8:5f:d4:bd:f6:1b:
                    e0:9f:38:c9:a0:7f:6c:8b:c7:27:3f:a2:9f:50:ff:
                    03:38:59:60:99:cb:45:94:d7:9c:7b:53:54:1f:85:
                    9f:86:74:78:38:1b:4a:5b:a3:e6:6e:ce:85:ac:d0:
                    3e:77:9e:43:5d:95:15:ff:3a:9c:bb:fa:d5:10:89:
                    5b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6E:80:0F:65:A5:FA:B9:AF:B1:B2:3F:A4:AC:BB:2A:21:38:5B:AC
            X509v3 Authority Key Identifier:
                keyid:39:D5:03:9F:B4:1A:6E:31:B2:4A:65:0C:9C:3A:3A:3F:51:2B:66:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/39D5039FB41A6E31B24A650C9C3A3A3F512B662E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39D5039FB41A6E31B24A650C9C3A3A3F512B662E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/3139302e3131352e38322e302f32332d3234203d3e20323730343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:b2:ce:32:07:a6:27:84:aa:86:f4:f1:02:3a:56:97:98:35:
         97:56:69:cb:3f:73:6a:5c:83:bb:d8:ee:43:4f:59:8f:d3:ed:
         c3:92:45:94:e2:f5:a0:f8:42:9b:a7:6a:a5:06:07:e0:a7:05:
         83:2e:f4:c2:59:99:5c:18:0b:e7:78:fe:68:98:48:c0:f2:cc:
         b8:84:e6:dd:27:86:21:b4:84:d3:ae:d7:e2:c2:f3:ae:7e:b4:
         c8:0b:c5:8d:2c:f5:c5:8e:3f:01:9e:4d:58:19:77:38:a8:23:
         c4:2e:2c:dc:bd:cf:b7:27:7f:74:48:7c:41:a9:65:2c:d7:ac:
         4c:ca:14:f2:c0:32:a3:9a:84:a1:97:45:33:8e:b4:7e:70:34:
         ec:7b:76:e6:b8:40:d0:2a:88:24:c1:2c:ee:53:7d:a3:ab:83:
         54:09:7f:54:85:2a:29:99:29:f3:8b:2a:8a:83:6d:f0:07:6b:
         fc:24:88:d4:36:5e:e9:35:37:f4:dc:37:20:c7:76:d6:23:25:
         da:b5:96:8f:11:6d:76:0f:f3:8a:c6:1c:41:b1:7a:44:57:7a:
         4d:5a:85:1b:e9:7b:7f:16:46:5e:dc:ac:e2:33:32:68:20:96:
         c7:05:10:56:e9:6b:07:59:89:ea:e8:73:94:12:9e:dc:83:47:
         b2:37:1f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org